We temporarily disabled a detection causing erroneous findings for Potential Application Shimming via Sdbinst.
This rule recently began triggering false positive findings for legitimate Windows activity associated with the Program Compatibility Service.
We are tuning the detection for this expected Windows activity and will reenable the rule globally.